sqlmap con tamper

sqlmap -u "<url>" --tamper=space2comment,between --level=5 --risk=3

Advanced version of sqlmap using tamper scripts to evade WAF and more aggressive testing levels.

When the target has a WAF (ModSecurity, Cloudflare, AWS WAF) and basic payloads are blocked. Tamper scripts transform payloads (e.g., spaces to comments, alternating case) to attempt evasion of rules. Raising level and risk tests more payloads and techniques, but is slower and noisier.

In environments where time is limited or the risk of blocking is high. Also if the application is critical and you cannot afford malfunction (level 5 may test payloads that alter data).